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AMENDMENT TO THE CLAIMS 

1. (currently amended) A method of providing Resource-Event-Agent (REA) model based 
security, the method comprising: 

identifying an REA defined associatio n of a type which dictates ownership between a 
first object and a second object in an REA model; 

creating an association class object for the REA defined association between the first 
object and the second object, the association class object having properties 
defining security between the first object and the second object 

2. (canceled) 

3. (previously presented) The method of claim 1, wherein creating the association class object 
further comprises creating one or more association class objects having properties, the 
properties of the one or more association class objects defining security between a first class of 
objects of which the first object is a member and a second class of objects of which the second 
object is a member. 

4. (previously presented) The method of claim 1, wherein the second object is a securable 
object. 

5. (origirnil) The method of claim 4, wherein the first object is of a particular agent type, and 
wherein a role for a user is defined by the particular agent type for the first object. 

6. (original) The method of claim 5, wherein the second object is a contract or agreement type 
object. 

7. (original) The method of claim 5, wherein the second object is a commitment type object. 
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8. (original) The method of claim 5, wherein the second object is an event type object. 

9. (original) The method of claim 5, wherein the second object is a resource type object. 

10. (original) The method of claim 5 5 wherein the second object is an agent type object 

11. (currently amended) The method of claim 5, wherein identifying the REA defined 
associatio n of the type which dictates ownership between the first object and the second object 
further comprises identifying a n REA defined control type association between the first object 
and the second object. 

12. (currently amended) The method of claim 5, wherein identifying the REA defined 
associatio n of the type which dictates ownership between the first object and the second object 
further comprises identifying an REA defined custody type association between the first object 
and the second object. 

13. (currently amended) The method of claim 5, wherein creating the association class object 
for the REA defined association between the first object and the second object further 
comprises creating the association class object in a security model. 

14. (previously presented) The method of claim 13, wherein creating the association class 
object in the security model further comprises creating the association class object in the 
security model separate from the REA model. 

15. (previously presented) The method of claim 13, wherein creating the association class 
object in the security model further comprises creating the association class object in the 
security model as part of the REA model. 
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16- (original) The method of claim 13, wherein defining security between the first object and 
the second object further comprises defining permissions and rights of the first object relative 
to the second object 

17. (origuial) The method of claim 16, wherein defining permissions and rights of the first 
object relative to the second object further comprises dynamically determining the permissions 
and rights in a security policy logic module outside of the security model. 

18. (currently amended) A computer readable medium having computer-executable instructions 
for performing steps of a method of providing Resource-Event-Agent (REA) model based 
security, the steps comprising: 

identifying an REA defined association of a type which dictates ownership b etween a 
first object and a second object in an REA model; 

creating an association class object for the REA defined association between the first 
object and the second object, the association class object having properties 
defining security between the first object and the second object. 

19. (canceled) 

20. (previously presented) The computer readable medium of claim 18, wherein creating the 
association class object further comprises creating one or more association class objects having 
properties, the properties of the one or more association class objects defining security between 
a first class of objects of which the first object is a member and a second class of objects of 
which the second object is a member. 

21. (previously presented) The computer readable medium of claim 18, wherein the First object 
is of a particular agent type, and wherein a role for a user is defined by the particular agent type 
for the first object. 
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22. (original) The computer readable medium of claim 21 f wherein the second object is a 
contract or agreement type object 

23. (original) The computer readable medium of claim 21, wherein the second object is a 
commitment type object 

24. (original) The computer readable medium of claim 21, wherein the second object is an 
event type object 

25. (original) The computer readable medium of claim 21, wherein the second object is a 
resource type object. 

26. (original) The computer readable medium of claim 21, wherein the second object is an 
agent type object, 

27. (currently amended) The computer readable medium of claim 18 s wherein identifying the 
REA defined a ssociatio n of the type which dictates ownership between the first object and the 
second object further comprises identifying an REA defined c ontrol type association between 
the first object and the second object. 

28. (currently amended) The computer readable medium of claim 18, wherein identifying the 
ftEA defined associatio n of the type which dictates ownership between the first object and the 
second object further comprises identifying a n REA defined custody type association between 
the first object and the second object 

29. (currently amended) The computer readable medium of claim 1 8, wherein creating the 
association class object for the REA defined association between the first object and the second 
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object further comprises creating the association class object in a security model. 

30. (previously presented) The computer readable medium of claim 29, wherein creating the 
association class object in the security model further comprises creating the association class 
object in the security model separate from the REA model. 

31. (previously presented) The computer readable medium of claim 29, wherein creating the 
association class object in the security model further comprises creating the association class 
object in the security model as part of the REA model. 

32. (original) The computer readable medium of claim 29, wherein defining security between 
the first object and the second object further comprises defining permissions and rights of the 
first object relative to the second object. 

33. (original) The computer readable medium of claim 32, wherein defining permissions and 
rights of the first object relative to the second object further comprises dynamically 
determining the permissions and rights in a security policy logic module outside of the security 
model. 

34. (currently amended) A system for providing security, the system comprising: 

a Resource-Event-Agent (REA) model configured to implement a first object, a second 
object, and an REA defined association of a type which dictates ownership 
between the first object and the second object; 

a security model configured to implement an association class object for th e REA 
defined association between the first object and the second object in the REA 
model, such that properties of the association class object define security 
between the first object and the second object 



PAGE 10/12 1 RCVD AT 1 1/21/2005 3:23:35 PM [Eastern Standard Time] * SVR:USPT0-EFXRF«6I26 * DNIS:2738300 1 CSID:6123343312 * DURATION (mm-ss):0244 



11/21/2005 14:*24 FAX 6123343312 

4 • 



WESTMAN CHAMPLIN & KELLY 



-7- 

35. (canceled) 

36. (currently amended) The system of claim 34, wherein the association class object further 
comprises one or more association class objects having properties, the properties of the one or 
more association class objects defining security between a first class of objects of which the 
first object is a member and a second class of objects of which the second object is a member. 

37. (currently amended) The system of claim 34, wherein the security model is separate from 
the REA model. 

38. (currently amended) The system of claim 34, wherein the security model is part of the REA 
model. 

39. (curreatly amended) The system of claim 34, and further comprising a security policy logic 
module coupled to the security model and configured to dynamically determine permissions 
and rights of the first object relative to the second object. 
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